Cybersecurity Headlines

Fake (right-wing) news does better than real news on Facebook

Security firm Qualys says it was victimized in Accelion zero-day

CISA issues emergency 'fix Exchange zero-days NOW!' directive

Thanks to our episode sponsor, TrustMAPP

The last audit firm that assessed your security compliance did the interviews, wrote a report, and then left. That's just half the job. Now you have to identify maturity gaps, cost out and prioritize remediations, and track improvement over time. That's where TrustMAPP comes in.

Link to Blog Post

https://cisoseries.com/cyber-security-headlines-week-in-review-march-1-5-2021

This week's Cyber Security Headlines - Week in Review, March 1-5, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, John Overbaugh (@johnoverbaugh), vp, security, CareCentrix

Maturity Assessment, Profile, and Plan Learn the MAPP methodology for managing security as a business. While the information security industry has undergone convulsive change, it is coalescing around maturity-based management of key business processes. The MAPP approach provides practical implementation of the maturity model.

This paper describes a three-step maturity-centric approach—Maturity Assessment, a Profile, and a Plan (MAPP). An information security MAPP empowers the CISO to evaluate, track, report, and strategize the organization's security priorities.

All links and the video of this episode can be found on CISO Series.com

Virginia's Consumer Data Protection Act signed into law

Exchange Server zero-days exploited in the wild

Facebook to lift political ad ban

Thanks to our episode sponsor, TrustMAPP

Does your board want to see yet more heat maps? No, they do not. They want to see that security investments align with business goals, and that their costs are objectively justified. TrustMAPP's data visualization helps you communicate with your board in a way they can understand – and approve.

Microsoft announces end-to-end encryption support for Teams, plus passwordless logins

U.S. unprepared for AI competition with China, commission finds

Tom Cruise deepfake videos rattle security experts

Thanks to our episode sponsor, TrustMAPP

Are you a vCISO? Building your practice and client base is hard enough – don't waste time building the tools you need to operate. TrustMAPP's turnkey SaaS platform gets you up and running quickly, so you can focus on your business.

For the stories behind the headlines, head to CISOseries.com.

Gab user data leaked

Biden administration to keep tech export ban rules

Hackers give websites great SEO before installing malware

Thanks to our episode sponsor, TrustMAPP

First it was GDRP in the EU, then California's CCPA. Now Virginia is set to pass its own Consumer Data Protection Act. Are you ready? Get ready with TrustMAPP.

Ryuk ransomware now self-spreads to other Windows LAN devices

Go malware sees 2000% increase, adopted by APTs and e-crime groups

Former SolarWinds CEO blames intern for 'solarwinds123' password leak

Thanks to our episode sponsor, TrustMAPP

Attention defense contractors! Are you ready for CMMC? TrustMAPP addresses your CMMC and NIST 800-171 maturity and compliance assessments needs today, and automatically builds a roadmap to achieve your desired level of maturity posture. For more information, visit TrustMAPP.com

For the stories behind the headlines, head to CISOseries.com.

Biden orders review of supply chain security

China uses malicious Firefox Extension to spy on Tibetans

Attackers scan for unpatched VMware servers after PoC exploit release

Thanks to our episode sponsor, PlexTrac

PlexTrac is the Purple Teaming Platform. Use the Runbooks Module to facilitate your tabletop exercises, red team engagements, breach and attack simulations, and pentest automation to improve communication and collaboration. PlexTrac upgrades your program's capabilities by making the most of every team member and tool. Check out PlexTrac.com/CISOSeries to learn why PlexTrac is the perfect platform for CISOs!

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, February 22-26, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, Naomi Buckwalter (@ineedmorecyber), director of information security and IT, Beam Technologies

Please join us live every Thursday at 4pm PT/7pm ET by registering for the open discussion.

All links and the video of this episode can be found on CISO Series.com

Microsoft and FireEye push for breach reporting rules

US Federal Reserve hit with massive IT outage

Path cleared for California's net neutrality law

Thanks to our episode sponsor, PlexTrac

Solve your talent shortage with PlexTrac. Use PlexTrac to automate security tasks and workflows to keep your red, blue, and purple teams focused on the real security work. Gain precious time back in your team's day and improve their morale by making them more effective with PlexTrac. Check out PlexTrac.com/CISOSeries to learn why PlexTrac is the perfect platform for CISOs!

Most firms now fear nation state attack

Firefox 86 gets privacy boost with Total Cookie Protection

Shadow attacks let attackers replace content in digitally signed PDFs

Thanks to our episode sponsor, PlexTrac

PlexTrac is the solution to deal with your data. Aggregate findings from all assessments to produce the analytics needed to make informed decisions. Produce data visualizations and add them to reports with one click to communicate effectively to leadership. PlexTrac is the premier product for security data management. Check out PlexTrac.com/CISOSeries to learn why PlexTrac is the perfect platform for CISOs!

For the stories behind the headlines, head to CISOseries.com.